CVEvulnerability

CVE-2021-22331

7.5 HIGH Published 2021-04-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-04-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-74

Description

There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers can exploit this vulnerability by sending a malicious application request to launch JavaScript injection. This may compromise normal service. Affected product versions include HUAWEI P30 versions earlier than 10.1.0.165(C01E165R2P11), 11.0.0.118(C635E2R1P3), 11.0.0.120(C00E120R2P5), 11.0.0.138(C10E4R5P3), 11.0.0.138(C185E4R7P3), 11.0.0.138(C432E8R2P3), 11.0.0.138(C461E4R3P3), 11.0.0.138(C605E4R1P3), and 11.0.0.138(C636E4R3P3).

Affected configurations

• huawei p30 firmware (< 10.1.0.165\(c01e165r2p11\)) • huawei p30 firmware (< 11.0.0.118\(c635e2r1p3\)) • huawei p30 firmware (< 11.0.0.120\(c00e120r2p5\)) • huawei p30 firmware (< 11.0.0.138\(c10e4r5p3\)) • huawei p30 firmware (< 11.0.0.138\(c185e4r7p3\)) • huawei p30 firmware (< 11.0.0.138\(c432e8r2p3\)) • huawei p30 firmware (< 11.0.0.138\(c461e4r3p3\)) • huawei p30 firmware (< 11.0.0.138\(c605e4r1p3\)) • huawei p30 firmware (< 11.0.0.138\(c636e4r3p3\))

Related

Weakness · CWE (1)

  • CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness

References